Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cb83b91d-f594-3ae4-8b9b-91375858c978.roa
File: cb83b91d-f594-3ae4-8b9b-91375858c978.roa (raw, json)
Hash identifier: SIEI1xdfKLtXL+KMqPZgC2fzyBSFDz/5WHK9d9sUU3w=
Subject key identifier: EB:68:D7:8D:91:80:7E:DB:91:F8:22:99:54:F1:3E:45:6E:5F:37:AF
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DAFC5E9663EEBD53EAF0540
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cb83b91d-f594-3ae4-8b9b-91375858c978.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 3848
IP address blocks: 199.243.154.128/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:af:c5:e9:66:3e:eb:d5:3e:af:05:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=067f87a2-99f4-421d-9403-5b6ce3a3fccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e5:67:a4:a5:6c:cc:f2:9d:1f:f1:53:5d:1d:
24:a0:53:04:51:1b:fa:ca:d3:71:6c:22:48:53:5c:
2f:02:b8:f8:d7:7c:6b:2f:b5:76:fb:ba:4e:7c:59:
45:2e:ec:7b:34:34:a7:a6:05:a7:d9:28:7b:92:17:
14:9a:b7:10:39:e2:64:1f:40:ee:be:97:e0:9d:94:
60:08:a7:80:ae:5b:2b:e7:13:71:fd:86:4a:9c:f9:
c3:49:1f:af:33:8c:fc:9f:b3:08:a3:8a:39:ba:ec:
93:a8:06:36:c4:75:f4:69:35:dc:e5:0f:ad:8a:f2:
04:01:67:69:5d:91:c6:0e:60:d4:e5:1d:ad:50:8b:
c7:64:cd:11:ea:34:e9:9f:83:e6:96:4c:8d:83:39:
a0:b2:47:e3:06:95:e6:26:72:7a:6d:ea:56:e1:c0:
1b:80:d2:cb:65:f3:4d:1b:b8:1f:39:f5:67:10:63:
c1:a1:b1:07:58:5b:36:99:f1:a6:8e:47:43:77:49:
ae:6b:3e:5b:f2:ae:27:5f:01:7e:bc:df:cd:70:e8:
8e:4e:bf:64:db:60:c7:50:55:1f:a4:c0:a7:fd:9e:
62:14:2b:de:45:bc:a3:9f:e2:4f:08:46:75:20:75:
35:70:13:b4:06:e0:57:36:bd:44:39:ce:86:37:c1:
92:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:68:D7:8D:91:80:7E:DB:91:F8:22:99:54:F1:3E:45:6E:5F:37:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cb83b91d-f594-3ae4-8b9b-91375858c978.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
199.243.154.128/25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:af:f2:ef:36:07:15:bd:8c:ce:d9:9d:89:a0:21:1a:37:73:
b0:39:9a:02:b4:b8:79:9f:ae:64:4e:69:8a:c4:3e:4d:fb:ac:
ab:9e:df:c8:89:3d:e1:aa:4e:82:a5:30:c3:30:e3:c6:55:8a:
15:a5:15:35:df:a4:56:d0:0c:5d:c9:61:a6:fb:9d:73:21:05:
db:50:6e:53:99:4b:75:fb:0a:78:1c:99:83:aa:10:67:b7:dd:
25:34:48:92:97:93:77:52:ba:47:c2:f2:99:e7:ad:d0:15:3a:
33:97:49:4f:dc:2a:64:cc:72:23:87:90:63:7a:79:15:77:29:
bd:e9:9f:7e:fc:3b:07:ad:f0:94:2d:70:8e:4b:2e:da:16:f5:
af:d9:d8:5d:cd:c3:ea:6a:41:a8:a6:6f:3b:64:52:8b:cf:22:
57:70:16:10:c4:3d:bd:79:71:13:81:a8:d4:10:5f:1e:0d:57:
76:49:63:df:32:7c:8c:e0:b4:9d:b8:60:ae:1a:21:0c:e0:4c:
f6:50:d6:2b:fb:0a:e6:de:c4:89:37:f0:fe:5d:97:95:7c:fd:
e7:69:92:e9:c4:b1:fe:1f:ed:86:7e:63:2b:50:6e:61:c2:a3:
c3:6a:9b:82:6c:3a:04:9d:55:ba:4c:a5:8a:46:9b:e8:a9:43:
07:b3:87:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:11 2024 by rpki-client on console-fra.rpki-client.org